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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address 
Period for Reply 


A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time maybe available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )(3 Responsive to communication(s) filed on 27 September 2005 . 
2a)|3 This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) M Claim(s) 7-72 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) H Claim(s) 7-72 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 


Attachment(s) 

1 ) O Notice of References Cited (PTO-892) 4) O Interview Summary (PTO-41 3) 

2) □ Notice of Draftsperson's Patent Drawing Review (PTO-948) Paper No(s)/Mail Date. . 

3) □ Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 5) □ Notice of Informal Patent Application (PTO-1 52) 

Paper No(s)/Mail Date . 6) D Other: . 
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DETAILED ACTION 

1. Claims 1-12 are pending in this application and have been examined. 


Response to Arguments 

2. The applicant argues in traverse of the rejection of the claims by asserting 
that the applied references do not teach the feature of a signature associated 
with each public key as called for in the independent claims. Yet as the applicant 
acknowledges, the admitted prior art of RFC 2459 at 4.1 .2.9 does teach an X.509 
certificate having such features. In addition Balenson does teach this feature in 
Sec. 4.3 as noted previously. 


Claim Rejections - 35 USC § 101 

3. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or 
composition of matter, or any new and useful improvement thereof, may obtain a patent 
therefor, subject to the conditions and requirements of this title. 


4. Claims 1-3 are rejected under 35 U.S.C. 101 because the claimed 
invention is directed to non-statutory subject matter. Claims 1-3 claim data, which 
is nonfunctional descriptive material. As such, embodying the data on a 
computer-readable would not make the claims statutory without language 
directed to read-out and execution of the computer code so as to cause a 
computing device to execute the steps coded for. See MPEP 706.03(a) and, 
especially, 2106 IV B 1 (b). 
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Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for 

all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 1 02 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

6. Claims 1-12 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Shambroom (5923756) and Schneier Applied Cryptography, in view of 
Balenson, "Privacy Enhancement for Internet Electronic Mail: Part III: Algorithms, 
Modes, and Identifiers", Network Working Group, Request For Comments (RFC) 
1423, February 1993. 

As for claim 1, in lines 32-35 of column 10, Shambroom discusses a 
certificate that includes a public key and list of one or more cryptographic 
algorithms supported by the entity associated with the public key. The certificate 
can resemble an X.509 certificate. On pages 574 and 575, Schneier describes 
the X.509 certificate. As can be seen in figure 24.2, the certificate includes a 
section (certificate extension) that identifies the algorithm, parameters, and a 
public key. There is also a section for a signature. These read on the first clause 
of applicant's first claim. The list of algorithms disclosed in Shambroom also 
anticipates an extension for identifying at least one alternative algorithm. 
Shambroom does not dictate that a second public key and signature therefore be 
included in the certificate or used as an alternative means of protecting data 
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included within the certificate. However Balenson does explicitly teach this 
(certificate extension) feature in Section 4.3, Asymmetric Signature Algorithms. 
Therefore it would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to configure an X.509 certificate to utilize alternative 
signatures formed with different algorithms on data contained within the 
certificate as taught by Balenson, in the exemplary X.509 certificate of 
Shambroom and Schneier, thereby protecting the data from compromise. It 
would have been desirable to do so since utilization of alternative algorithms 
would increase the difficulty in unauthorized access to the protected data within 
the certificate. Motive to make this combination is found for example, at page 574 
where Schneier discusses the advantages of X.509 certificates capable of 
utilizing different algorithms such that authentication across networks is made 
possible. 

As for claim 2, pages 480 and 481 of Schneier discuss elliptic curve 
public key systems. RSA is first mentioned on page 17. According to Schneier, it 
is the most popular public-key algorithm. There are trade-offs between the two, 
particularly in terms of the relative computational workloads of the two entities 
(signer and verifier). Therefore it would have been obvious to a person of 
ordinary skill in the art at the time the invention was made to support RSA and an 
elliptic curve cryptosystem with the X.509 certificate taught by Shambroom. 
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As for claim 3, both of the signatures taught by the combination of 
Shambroom, Schneier and Balenson verify at least part of the certificate and 
hence read on claim 3. 

Claims 4-6, 7-9, and 10-12 are largely the same as claims 1-3 and are 
rejected on the same grounds. 

Conclusion 

7. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of 
time policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire 
THREE MONTHS from the mailing date of this action. In the event a first reply is 
filed within TWO MONTHS of the mailing date of this final action and the advisory 
action is not mailed until after the end of the THREE-MONTH shortened statutory 
period, then the shortened statutory period will expire on the date the advisory 
action is mailed, and any extension fee pursuant to 37 CFR 1 .136(a) will be 
calculated from the mailing date of the advisory action. In no event, however, will 
the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

8. Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Paul E. Callahan whose telephone number is 
(571 ) 272-3869. The examiner can normally be reached on M-F from 9 to 5. 
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If attempts to reach the examiner by telephone are unsuccessful, the 
Examiner's supervisor, Emmanuel Moise, can be reached on (571 ) 272-3865. 
The fax phone number for the organization where this application or proceeding 
is assigned is: (571) 273-8300. 


11/30/05 



SUPERVISORY PATENT EXAMINER 



